$ rpki-client -vvvf rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.mft File: 412965964A4E12BD59BDF602A054F3394E99DC57.mft (raw, json) Hash identifier: pm5gCpiC0h5A0CEi5b5WZxfGCoESUYw95rl9RTLDFgM= Subject key identifier: E2:CD:31:62:CE:EC:52:0C:7B:B7:28:E7:1E:A1:5C:E3:CB:40:82:14 Authority key identifier: 41:29:65:96:4A:4E:12:BD:59:BD:F6:02:A0:54:F3:39:4E:99:DC:57 Certificate issuer: /CN=412965964A4E12BD59BDF602A054F3394E99DC57 Certificate serial: 68B9FE0777C722E72526F2F70EC1934CF650D59B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/412965964A4E12BD59BDF602A054F3394E99DC57.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.mft Manifest number: BD Signing time: Tue 22 Sep 2026 06:09:03 +0000 Manifest this update: Tue 22 Sep 2026 06:04:03 +0000 Manifest next update: Wed 23 Sep 2026 06:20:03 +0000 Files and hashes: 1: 3130332e31362e34382e302f32332d3234203d3e20313332363334.roa (hash: uLq3gfPOGWF6ZWj1F9WMmGzvCujMeECGwqgAQGV2Nv4=) 2: 412965964A4E12BD59BDF602A054F3394E99DC57.crl (hash: 5CBpzQT+OTHbH1RyIjntC/qde9i2StJXIxAALXe7/oU=) 3: 3130332e382e3233382e302f32342d3234203d3e20313332363334.roa (hash: PR4TqG8Gt/NDoejWkXR5KiYWrPCc3WE35fh/Jxbvano=) 4: 3130332e3232352e3234322e302f32342d3234203d3e20313332363334.roa (hash: SenSDJoyF/7+T+Cte5ij0s1hRLf2P72+k6wabdM015Q=) 5: 3130332e362e33342e302f32342d3234203d3e20313332363334.roa (hash: s2Tpgag7FxdnRddbkWVhsKOC3K9zk4kizsUSEDbaWVQ=) 6: 3130332e31382e3131372e302f32342d3234203d3e20313332363334.roa (hash: TwoAdTsM3NEVv7qQwQrrGzyUs0c/Mt2dxvgYNM1lek8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.crl rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/412965964A4E12BD59BDF602A054F3394E99DC57.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 06:20:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:b9:fe:07:77:c7:22:e7:25:26:f2:f7:0e:c1:93:4c:f6:50:d5:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=412965964A4E12BD59BDF602A054F3394E99DC57 Validity Not Before: Sep 22 06:04:03 2026 GMT Not After : Sep 23 06:20:03 2026 GMT Subject: CN=E2CD3162CEEC520C7BB728E71EA15CE3CB408214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:dd:c0:9c:97:c7:b3:bf:d9:25:16:17:f0:8c: 0a:a8:8f:9b:ae:ee:72:d9:e8:50:78:3a:4b:22:47: 51:84:17:ce:9d:f7:81:8b:0b:34:0e:6e:36:c0:bb: 36:41:30:6b:4b:a6:e1:37:f0:a5:1d:71:46:b6:11: b7:06:06:1c:06:a5:e9:31:2a:ec:57:01:f9:b5:70: be:b6:e7:8b:ed:da:6f:3f:76:a3:36:a7:c9:41:04: 9e:e6:d2:c6:fd:71:7f:07:9d:5f:d0:c7:f5:65:2e: 8c:bc:bb:ef:ba:09:27:8d:14:45:f7:a9:30:1a:77: e3:98:eb:f6:e9:bc:8d:da:47:bb:5d:d0:fc:b4:bf: 95:5a:83:b4:bb:42:18:7d:29:1a:7b:e1:10:18:ba: 9e:36:ef:81:14:64:90:94:59:2a:4b:03:cf:0f:c0: f8:cb:ea:98:0f:25:8b:0b:39:97:93:34:d1:12:91: 46:a6:bf:4d:14:c2:4e:03:6f:16:55:c5:f2:92:99: d8:cf:a3:dc:d9:94:ed:09:52:87:b8:f7:d4:2d:35: 6c:91:27:fe:7b:6b:08:b8:05:ea:4a:1b:89:cf:fd: 70:c5:eb:83:a8:13:f0:dd:88:f6:06:e9:e5:0f:70: f5:94:14:67:ac:3c:81:2e:74:a2:bb:3a:e8:00:69: e8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:CD:31:62:CE:EC:52:0C:7B:B7:28:E7:1E:A1:5C:E3:CB:40:82:14 X509v3 Authority Key Identifier: keyid:41:29:65:96:4A:4E:12:BD:59:BD:F6:02:A0:54:F3:39:4E:99:DC:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/412965964A4E12BD59BDF602A054F3394E99DC57.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:e5:0a:46:de:bd:5d:d6:bc:b0:64:a8:f3:d8:79:e0:9a:ed: 16:67:78:d7:83:4c:48:27:29:18:a3:83:e7:0a:8d:0d:34:62: f2:2e:fc:5e:00:9f:5f:b6:99:55:f3:6e:f5:16:a4:13:27:13: 86:1c:e6:b0:99:69:94:1a:da:88:0a:f2:dd:ff:f2:20:05:c4: ff:b4:2c:43:12:4c:bb:d9:bd:42:97:f5:d4:4a:ad:8b:8a:15: a9:0b:ca:fb:23:30:5c:28:c2:86:29:0d:e5:f4:23:37:50:3b: 3e:af:8c:8c:d5:93:b3:57:25:d7:e6:7c:a2:5b:5d:35:e0:79: d1:e2:03:1a:79:c7:36:53:8d:e1:29:68:be:68:90:f3:55:09: d0:a6:21:d3:93:47:4c:0d:7f:1c:e1:f7:36:5b:7b:42:d8:25: 16:45:3f:ba:7e:5d:c2:df:3b:ae:e5:94:df:a7:69:2d:8c:5f: c1:8b:4c:75:78:73:dd:e8:53:96:98:da:71:39:c9:01:25:ed: c7:03:95:21:94:99:71:9e:58:de:79:16:79:e4:bb:67:eb:0f: c6:7e:06:b0:53:38:ee:9c:e4:71:5d:d3:1d:84:44:91:a6:b4: 9b:83:d8:2f:6b:27:de:f1:52:b3:27:26:35:4c:4a:6b:30:33: 64:93:54:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaLn+B3fHIuclJvL3DsGTTPZQ1ZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDEyOTY1OTY0QTRFMTJCRDU5QkRGNjAyQTA1NEYzMzk0 RTk5REM1NzAeFw0yNjA5MjIwNjA0MDNaFw0yNjA5MjMwNjIwMDNaMDMxMTAvBgNV BAMTKEUyQ0QzMTYyQ0VFQzUyMEM3QkI3MjhFNzFFQTE1Q0UzQ0I0MDgyMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU3cCcl8ezv9klFhfwjAqoj5uu 7nLZ6FB4OksiR1GEF86d94GLCzQObjbAuzZBMGtLpuE38KUdcUa2EbcGBhwGpekx KuxXAfm1cL6254vt2m8/dqM2p8lBBJ7m0sb9cX8HnV/Qx/VlLoy8u++6CSeNFEX3 qTAad+OY6/bpvI3aR7td0Py0v5Vag7S7Qhh9KRp74RAYup4274EUZJCUWSpLA88P wPjL6pgPJYsLOZeTNNESkUamv00Uwk4DbxZVxfKSmdjPo9zZlO0JUoe499QtNWyR J/57awi4BepKG4nP/XDF64OoE/DdiPYG6eUPcPWUFGesPIEudKK7OugAaegrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4s0xYs7sUgx7tyjnHqFc48tAghQwHwYDVR0j BBgwFoAUQSlllkpOEr1ZvfYCoFTzOU6Z3FcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjBmN2JlMDYtOTY3Mi00NjQxLTk3YmQtOWJmZGY5NTVkZTE3LzAvNDEyOTY1OTY0 QTRFMTJCRDU5QkRGNjAyQTA1NEYzMzk0RTk5REM1Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MTI5NjU5NjRBNEUxMkJENTlCREY2MDJBMDU0RjMzOTRFOTlE QzU3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjBmN2JlMDYtOTY3Mi00NjQxLTk3 YmQtOWJmZGY5NTVkZTE3LzAvNDEyOTY1OTY0QTRFMTJCRDU5QkRGNjAyQTA1NEYz Mzk0RTk5REM1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACXlCkbevV3WvLBkqPPYeeCa7RZneNeDTEgn KRijg+cKjQ00YvIu/F4An1+2mVXzbvUWpBMnE4Yc5rCZaZQa2ogK8t3/8iAFxP+0 LEMSTLvZvUKX9dRKrYuKFakLyvsjMFwowoYpDeX0IzdQOz6vjIzVk7NXJdfmfKJb XTXgedHiAxp5xzZTjeEpaL5okPNVCdCmIdOTR0wNfxzh9zZbe0LYJRZFP7p+XcLf O67llN+naS2MX8GLTHV4c93oU5aY2nE5yQEl7ccDlSGUmXGeWN55Fnnku2frD8Z+ BrBTOO6c5HFd0x2ERJGmtJuD2C9rJ97xUrMnJjVMSmswM2STVFE= -----END CERTIFICATE-----Generated at Tue Sep 22 17:02:57 2026 by rpki-client